$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/7B18C5B40CCE11ED97C94316C4F9AE02.roa File: 7B18C5B40CCE11ED97C94316C4F9AE02.roa (raw, json) Hash identifier: de6AgBdYKFDLnPJ/PEBqqKvZDu++14qokiXxuhux/kU= Subject key identifier: 13:4B:25:4B:B3:EB:EE:DD:18:1C:CC:57:39:22:63:79:57:77:36:47 Certificate issuer: /CN=A91D2A6D/serialNumber=FC7B394F8F9CBF9CDD2093C2726DDFE913FAA9CE Certificate serial: 0145 Authority key identifier: FC:7B:39:4F:8F:9C:BF:9C:DD:20:93:C2:72:6D:DF:E9:13:FA:A9:CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/7B18C5B40CCE11ED97C94316C4F9AE02.roa Signing time: Wed 27 Sep 2023 03:24:14 +0000 ROA not before: Wed 27 Sep 2023 03:24:14 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 134573 IP address blocks: 103.120.230.0/23 maxlen: 23 103.120.230.0/24 maxlen: 24 103.120.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2A6D/serialNumber=FC7B394F8F9CBF9CDD2093C2726DDFE913FAA9CE Validity Not Before: Sep 27 03:24:14 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=6513a05e-c776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:75:9f:ba:5e:37:61:9d:d8:c6:3d:59:ca:3e: e8:64:47:c3:a5:33:06:81:72:f4:24:75:70:a2:6e: af:ac:c1:61:7a:6d:76:d9:d3:7c:ba:e5:3a:0b:71: cc:49:c7:0d:a0:0a:e5:3c:72:26:6d:0e:73:d6:8a: 3b:94:94:29:90:02:a0:ca:1c:f3:aa:d0:6d:46:29: b5:bf:6e:1b:42:f8:8c:b9:51:72:6b:35:03:bb:40: a6:66:65:d9:10:33:d5:f2:99:ee:af:2f:8f:4a:45: f0:c0:42:b4:d3:04:c5:c5:20:58:f6:bc:4f:54:69: 46:27:c5:69:37:eb:fa:e1:1c:e1:08:20:1b:2e:3f: b9:90:b2:e4:a5:2b:83:b3:75:73:29:01:18:cc:e7: 5d:f4:39:34:18:a4:5b:6a:53:28:4c:2d:21:c8:51: c0:68:59:ea:0e:3e:ee:95:a8:7b:09:9f:99:01:0b: c1:19:05:d3:57:e4:f4:46:13:d3:9d:83:5a:0d:f7: e5:18:bb:51:53:51:89:b4:b3:ab:7d:fc:e7:64:e8: e2:da:cd:03:7d:cb:9e:00:cf:ff:ef:f2:45:8f:96: 75:11:d2:f8:d4:10:1c:e3:a8:e8:10:82:70:95:2f: 9e:55:36:a7:c0:71:1b:5b:0d:f9:f0:19:36:16:0a: 53:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:4B:25:4B:B3:EB:EE:DD:18:1C:CC:57:39:22:63:79:57:77:36:47 X509v3 Authority Key Identifier: keyid:FC:7B:39:4F:8F:9C:BF:9C:DD:20:93:C2:72:6D:DF:E9:13:FA:A9:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/7B18C5B40CCE11ED97C94316C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.120.230.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:11:81:35:d3:ce:93:f6:80:f2:34:b5:03:5e:90:60:44:e9: a6:c3:af:e2:3d:68:c1:06:29:25:bc:f7:14:87:4c:03:50:db: 90:54:f8:e6:ba:b7:c2:9a:fe:26:c8:69:8e:7b:bf:5e:84:6e: 09:0f:67:94:55:a7:f1:57:82:fe:05:b2:b4:82:7b:3e:67:7b: 6a:b5:37:00:0e:e2:85:63:94:1d:61:40:4c:4c:4c:ad:4e:4a: 3c:29:be:08:fe:c9:63:fb:0a:9a:37:35:c4:5e:4a:48:9f:f1: 45:6d:a4:53:02:5f:f4:4a:80:38:d7:d3:9a:52:df:24:a8:02: ea:9a:27:fb:80:18:71:d5:2b:ad:34:dc:a4:fb:07:05:47:78: 8e:7a:9f:f5:7b:d8:0c:d3:04:fb:39:69:73:da:3f:44:51:5b: 9e:14:9f:32:d9:be:22:c3:fb:a9:f7:49:a6:6a:88:9e:02:9c: 59:5d:d9:e8:5d:1c:3c:7c:c5:45:d1:f3:89:9d:64:80:4e:a4: 7c:46:11:a8:2e:97:50:48:f6:25:82:2e:84:c9:0d:ab:7d:79: f1:2f:5a:ba:d6:66:a6:f7:54:82:9d:7c:dc:00:a3:86:ca:f2: 65:b2:19:6a:80:5c:e5:8f:85:a5:ca:97:95:ce:bd:02:ad:cd: 50:af:ce:10 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJBNkQxMTAvBgNVBAUTKEZDN0IzOTRGOEY5Q0JGOUNERDIwOTNDMjcyNkRERkU5 MTNGQUE5Q0UwHhcNMjMwOTI3MDMyNDE0WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTEzYTA1ZS1jNzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwHWful43YZ3Yxj1Zyj7oZEfDpTMGgXL0JHVwom6vrMFhem122dN8uuU6C3HM SccNoArlPHImbQ5z1oo7lJQpkAKgyhzzqtBtRim1v24bQviMuVFyazUDu0CmZmXZ EDPV8pnury+PSkXwwEK00wTFxSBY9rxPVGlGJ8VpN+v64RzhCCAbLj+5kLLkpSuD s3VzKQEYzOdd9Dk0GKRbalMoTC0hyFHAaFnqDj7ulah7CZ+ZAQvBGQXTV+T0RhPT nYNaDfflGLtRU1GJtLOrffznZOji2s0DfcueAM//7/JFj5Z1EdL41BAc46joEIJw lS+eVTanwHEbWw358Bk2FgpTNwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBNLJUuz 6+7dGBzMVzkiY3lXdzZHMB8GA1UdIwQYMBaAFPx7OU+PnL+c3SCTwnJt3+kT+qnO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkE2RC83RjhENjNCNDBD Q0IxMUVEQjNDRDQ3NjhDNEY5QUUwMi9fSHM1VDQtY3Y1emRJSlBDY20zZjZSUDZx YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19IczVUNC1jdjV6ZElKUENjbTNmNlJQNnFjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDJBNkQvN0Y4RDYzQjQwQ0NCMTFFREIzQ0Q0NzY4QzRGOUFFMDIvN0IxOEM1QjQw Q0NFMTFFRDk3Qzk0MzE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFneOYwDQYJKoZIhvcNAQELBQADggEBAAsRgTXTzpP2gPI0 tQNekGBE6abDr+I9aMEGKSW89xSHTANQ25BU+Oa6t8Ka/ibIaY57v16EbgkPZ5RV p/FXgv4FsrSCez5ne2q1NwAO4oVjlB1hQExMTK1OSjwpvgj+yWP7Cpo3NcReSkif 8UVtpFMCX/RKgDjX05pS3ySoAuqaJ/uAGHHVK6003KT7BwVHeI56n/V72AzTBPs5 aXPaP0RRW54UnzLZviLD+6n3SaZqiJ4CnFld2ehdHDx8xUXR84mdZIBOpHxGEagu l1BI9iWCLoTJDat9efEvWrrWZqb3VIKdfNwAo4bK8mWyGWqAXOWPhaXKl5XOvQKt zVCvzhA= -----END CERTIFICATE-----Generated at Sun May 19 04:56:56 2024 by rpki-client on console-fra.rpki-client.org